No. Institutions are fully capable of doing whatever filtering they wish. They always were and always will be. Period. Full stop. Howgh.

They can and should secure their network, watch out for data exfiltration anyway, etc.

They should disable ever kind of network traffic that does not go through their auditing/filtering proxy (HTTP, DNS, SMTP or whatever).

If they want to support bring-your-own-device, great, configure said devices, set up proxy-auto-configuration, hand out "how to set up your device to work on corp-wifi" flyers, and in general, they have their IT team, let them work and they will figure this out.

The old way of just MITM-ing was always bad for at best it was/is lazy, but in reality it's quite unprofessional and counter-productive for security.